You are looking for the programme and all the speakers? This is the right place!
Thu 22 Jun
10.20am – 11.05am
Get your Front End Rolling with Vue and InertiaJS
Get your Front End Rolling with Vue and InertiaJS
Talk
The JavaScript frontend scene is exciting, but maybe you don’t want to write an API just to use the new shiny. Enter InertiaJS, a new framework that allows you to use Vue as your view layer while keeping your existing backend. Come see how to take advantage of this using ColdBox, Vue, and InertiaJS.
InertiaJS is a new JavaScript framework made for people who don’t really need an API but want to use a modern JavaScript framework like React or Vue as their view layer. Inspired by libraries like Turbolinks, InteriaJS makes your app behave like a SPA while still being a fully sever-rendered app.
In this talk, we will go through
- Visual explanation of InertiaJS
- How to set up InertiaJS on the server
- How to set up InertiaJS on the client
- Demo of the end result
- Pros and Cons
So skip writing the API you are only using yourself, just use your framework as normal and take advantage of the great frontend JavaScript world at the same time.
Speakers
Eric Peterson
Business Rule Visualisation using CFML and HTML - or "What we really need is a flowchart"
Business Rule Visualisation using CFML and HTML - or "What we really need is a flowchart"
Talk
When your business rules overwhelm you with complexity and you need your business users to be able to change them, what do you do? My solution was software that presents business rules as a flow chart. Sophisticated enough to represent the rules but simple enough for users to modify them.
At my place of work, our business rules can get very complex, just like any other company. We needed some way of representing these business rules so that we could explain them to business users and, occasionally, let those users alter the rules when things change without needing code changes.
When I started, most of the rules were represented by multiple grids of information, so I created some software we call the Matrix.
The Matrix is a series of business rule statements in If-Then-Else format displayed in a very similar manner to a flowchart. This appealed to us as programmers because it simplified the logic, but also appealed to managers who could “read” the flowchart format and help us to understand how future rules could be implemented.
The Matrix is written in CFML, generating HTML with a few pieces of JQuery thrown in for good measure.
This CFCamp talk will be an exploration of how the software fits together and can be used to create new sets of rules. There will be the peril and excitement of a live demo!
Speakers
Michael Horne
11.20am – 12.05pm
Please pass the salt: Serve up passwords with a side of entropy
Please pass the salt: Serve up passwords with a side of entropy
Talk
We’ll look at what you’re doing right… and wrong when storing your user passwords. We’ll look at the most basic forms of password storage and move to more secure methods, discussing advantages and disadvantages of each method, including covering high-visibility hacks that have hit real companies.
Passwords are like opinions, everyone has them and some are easier to figure out than others. As application developers and DBAs, our users entrust us with the precious keys to their social media, E-mails, bank accounts, and shopping history. Hopefully everyone has figured out storing your passwords in plain text is really bad, but is a simple hash good enough? You’ve probably heard someone say that if you’re rolling your own crypto, you’re probably doing it wrong, but what ARE you supposed to do? There’s so much information out there about encryption, hashes, iterations, salts, and entropy that it’s hard to decipher and sometimes even harder to convince your boss why it’s worth spending time on. Let’s take a practical look into the world of password storage by starting with the most basic approach and what’s wrong with it. We’ll work through many of the common techniques and explain how they fall short. We’ll talk about the tools crackers use such as brute force, lookups, and rainbow tables to explain how the baddies wrench your users’ secrets from your stolen databases using several recent high-profile attacks as examples. How can you protect against a thread you don’t even understand?
- Why YOUR site is worth making secure
- How hashing differs from encryption
- What password policy creates the best entropy
- What the heck is a rainbow table and does it have a pot of gold at the end?
- What libraries you can start using today to do it “right”?
Speakers
Brad Wood
Scaling our Lucee powered product business
Scaling our Lucee powered product business
Talk
Pixl8 are a global technology business that delivers Lucee-powered technology platforms for membership organisations, regulators and those who run large-scale events or crm.
With 100s of clients running tailored applications, we actively compete with Salesforce and Dynamics vendors with our platform powered by Lucee. In this talk, Alex and Dominic discuss the problems and solutions they have used to efficiently run and scale their vast CFML estate across different regions in Kubernetes using Preside, Gitlab, ELK, Grafana and more!
We will deep dive
- Setup, deployment
- Performance Monitoring + Logging Internationalisation using translation memory + AI
- Compliance, Vulnerability scanning + Pen testing
- Budget management, Kubernetes API + Hibernation
Speakers
Alex Skinner
Dom Watson
1pm – 1.45pm
Why Testing Is Important And Where Do I Start?
Why Testing Is Important And Where Do I Start?
Talk
Apps are getting more complex, clients have big expectations, and the world is growing quickly. But the idea of using a full blown testing framework feels daunting, so instead we do...nothing.Testing our code is important, and only getting more important as time goes on. Between legacy code, technical debt, fear of the unknown, and other stressors, it can be challenging to figure out how to best test our applications.
In this talk we'll look at why testing is important, and how we can start. We'll cover a variety of techniques that work for well built OOP applications, legacy codebases that run crucial systems, and everything in between. Yes there are ways to test all of them! And without giving yourself a heart attack in the process!
Speakers
Nolan Erck
React and CFML : A Natural Fit
React and CFML : A Natural Fit
Talk
React is a “View” framework and makes powerful JavaScript based applications for the browser. CFML is a server side “Controller” language and can rapidly create powerful and secure APIs to be used by outside applications. Here, we’ll create a React app and a CFML API for a working local ecosystem.
In this session, we’ll start with “nothing” and use Create React App to make a simple application which can read and write to a ColdFusion API which we will create using CommandBox and ColdBox. We’ll develop the routes, handlers and models we need to power our API module so it can be consumed by our React app in a local environment. As part of the planning process we’ll go over some conventions that go into building REST applications and setting up our React app for separation of concerns with a UI, controller and a service layer to make the API calls and to handle the responses from the server.
Speakers
Dan Card
2pm – 2.45pm
Beyond cferror: Keeping on top of your crashes
Beyond cferror: Keeping on top of your crashes
Talk
It doesn’t matter if you’re working on a website, an app or on a complex back end enterprise system. We all know that software is usually not free of bugs. Monitoring your back end systems in some way is reasonably common nowadays. But is there more to it than just dumping errors into a DB table?
It doesn’t matter if you’re working on a website, an app or on a complex back end enterprise system. We all know that software is usually not free of bugs. Monitoring your back end systems and having error logging mechanism for them is reasonably common nowadays. Logging issues in client-side apps is usually more complicated and requires some planning and usually additional libraries, but ideally you’d be able to track and follow issues across your tech stack and be notified of critical problems. All of these requirements fall into the bigger bucket of APM (Application Performance Management)
This talk will provide insights into various approaches available to CFML developers. We’ll start by having a look into the different types of exception and error objects you can run into when using ACF or Lucee and some of the underlying Java platforms. While you’re developing, useful information is usually presented to you on the screen or in some kind of device log or browser developer toolkit. But when your system is out there in production, you’ll need some way to look at what’s going on under the hood.
A lot of people have built homegrown solutions over the years and reinvent the wheel over and over again. But Forgebox unveils a bunch of different available integrations: Raygun, Sentry, Bugsnag and others. They all follow a similar approach - sending error information to a cloud system where it’s being analysed and displayed for you in a meaningful way.
If you want to stay closer to home, the Box universe offers Logbox and Stachebox to work with error and logging information and make them easily accessible. Each of these solutions has its pros and cons, some of them can (and should probably) even be mixed-and-matched.
After this session you’ll have a much better understanding of the error logging and crash reporting ecosystem and will have seen common usage patterns. The session will also cover typical organisational concerns such as perceived performance overhead or cost and how to counter and debunk some of these myths by looking at the benefits of a comprehensive error logging solution.
Speakers
Kai Koenig
Exploring the Dark Side of Agile Software Development and Software Architecture
Exploring the Dark Side of Agile Software Development and Software Architecture
Talk
This talk will uncover the brutal truth about Agile software development and software architecture! Jafar will share some real-world examples about ugly truths and harsh realities of these practices. Through raw and unfiltered insights and case studies learn how to turn the pitfalls into opportunities and emerge as a software champion. This is your chance to try critical perspective, challenge your beliefs and be at the forefront of the software revolution.Speakers
Jafar Shayan
3.10pm – 3.55pm
Frontend Testing with cypress.io
Frontend Testing with cypress.io
Talk
Cypress.io is an awesome frontend testing tool that can run automated tests with the help of embedded browsers and their APIs. Check if your website does what it says with scripts in an easy-to-learn JS syntax and watch cypress open a browser and magically check your site as if it were a user.
Cypress is awesome. Look, as soon as you have a website that has more than a few pages and links and buttons that do stuff, you should test its frontend. Cypress makes this process relatively easy and pain-free.
You can install via npm. In your tests, you can use obvious methods such as .click() to have the embedded browser click on an element. You can use standard CSS selectors to select the elements you want to check or interact with.
Frontend testing made easy!
Speakers
Maximilian Kwapil
cbSecurity - Secure all Things!
cbSecurity - Secure all Things!
Talk
The ColdBox cbSecurity module is a collection of modules to help secure your ColdBox applications. From security contexts, rules, annotations, headers and even password generation. cbSecurity will help you secure all things.
In this session we will explore all the features that will help you secure your applications. We will explore features like the firewall rule engine, annotation security, firewall visualizer, common exploits prevention, and so much more.
Speakers
Luis Majano
4.10pm – 4.55pm
cbPlaywright — End-to-End Tests with Playwright and TestBox
cbPlaywright — End-to-End Tests with Playwright and TestBox
Talk
Test your application in the same way your users interact with it while still writing your tests in TestBox and CFML. Learn tips and techniques for writing good end-to-end tests, and discover the power of Playwright.
Playwright is end-to-end testing tool by Microsoft. It can be used to simulate a browser visiting your website like Selenium and Cypress. The real fun for us comes from the Java SDK for Playwright which we can use to run Playwright from our TestBox tests! In this session you will learn how to get started testing your website end-to-end with Playwright and TestBox.
Speakers
Eric Peterson
Taming the Top 25 Most Dangerous Software Weaknesses with CFML
Taming the Top 25 Most Dangerous Software Weaknesses with CFML
Talk
t doesn’t matter what language you use, security weaknesses will find a way to show up. In this talk we’ll look at 25 types software weaknesses that cause the most security vulnerabilities. For each weakness we’ll look at how CFML might be impacted and most importantly to avoid it.
In this session, we’ll dive into the “Top 25 Most Dangerous Software Weaknesses list” from the lens of a CFML developer. For many of the weaknesses we’ll look at an example of vulnerable CFML code and how to exploit it. Understanding the vulnerability, and how it is exploited is an important skillset for developers to have, but possibly even more important is understanding how to write code that avoids the weakness all together.
Some of the weaknesses we’ll explore include:
- Code Injection / Remote Code Execution
- XXE Injection
- Server Side Request Forgery
- File Upload Vulnerabilities
- Cross Site Request Forgeries
- Path Traversals
- And many more
Speakers
Pete Freitag
Massive Task Scaling with Lucee’s Task Event Gateways and Kubernetes
Massive Task Scaling with Lucee’s Task Event Gateways and Kubernetes
Talk
Sponsor session: Lucee
In this presentation, the speaker discusses the process of scaling tasks using Lucee’s Task Event Gateways and Kubernetes. The presentation highlights the challenges of quickly scaling to meet demand and the benefits of using Lucee’s Task Event Gateways for task management. The speaker also provides a detailed explanation of Kubernetes and its role in task scaling. The speaker explains how Lucee’s Task Event Gateways can be used to manage tasks in a distributed environment, allowing for efficient task processing and scaling. The presentation also covers the benefits of using Kubernetes, such as automatic scaling, load balancing, and resource utilization management. Overall, the presentation provides valuable insights into how developers can leverage Lucee’s Task Event Gateways and Kubernetes to scale massive tasks efficiently. The speaker also highlights the importance of task management in achieving business goals and maximizing productivity.
Speakers
Mark Drew
Fri 23 Jun
9am – 10am
Don't Quit Your Day Job
Don't Quit Your Day Job
Keynote
Join us for an enlightening keynote presentation that will demonstrate how software developers and emerging technologies have a rich history of collaboration, even when it initially appeared that new advancements might threaten the profession. We will journey through the past, illustrating how developers have confronted these fears and ultimately emerged stronger and more versatile.
We will discuss the evolution of software development, highlighting instances when groundbreaking technologies initially sparked apprehension, only to create new and exciting opportunities for developers eventually. Moreover, we will explore how contemporary innovations can be harnessed to enhance and elevate your work.
Prepare for real-life examples and thought-provoking discussions that will invigorate your enthusiasm for the future of software development. By the end of the presentation, you will have gained fresh insights on how to grow and adapt as a developer, embracing the latest advancements to propel your career forward.
Speakers
Kevin Goldsmith
10.20am – 11.05am
Incident Management - Talk the Talk, Walk the Walk
Incident Management - Talk the Talk, Walk the Walk
Talk
Incident management can be challenging and throw you curveballs with unexpected issues, resulting in data loss, downtimes, and overall money & hours of sleep going to waste, BUT! There are practical things you could do & prepare you to make it a smoother process and handle it better.
Remember when we were at school, and people said - “Actively listening in class guarantees 50% prep for the upcoming test”? The same goes for being proactive at work in ways that will instantly prepare you to manage incidents better (at night or in general).
In this talk, I will lay out the foundations of incident management, including key questions that if you’ll be able to answer - You will be able to easily manage incidents, no matter the time and place. I will also show the best practices I’ve finalized over the years that helped me get a clear vision of how to manage production incidents in the quickest & efficient way possible.
Embracing the tips I’ll give you will guarantee you’ll not only talk the talk but also walk the walk when it comes to incident management.
Speakers
Hila Fish
What's new in CSS?
What's new in CSS?
Talk
A breakdown of all CSS features that made it into browsers lately and a peak into upcoming features from someone involved in the CSS standardization.
At the beginning, the talk will briefly explain what the CSS Working Group (CSSWG) is and how the standardization process of CSS works. It will also shortly discuss what’s behind the interoperability efforts of browser vendors.
The main part will cover features that made it into browsers the last year like Container Queries, :has(), Cascade Layers, Subgrid and much more. Each feature will include an example and links for further reading.
And it closes on features that are on the horizon like Nesting, Style Scoping, View Transitions plus some other ideas that are discussed in the CSS Working Group and how people can participate.
Speakers
Sebastian Zartner
11.20am – 12.05pm
Hidden gems in ColdFusion 2023
Hidden gems in ColdFusion 2023
Talk
What’s new in CF2023–that you may not hear so much about? With each release, certain “key” features get lots of attention, but there are always little “hidden gems” that may excite you even more.
It’s that time again: another new ColdFusion version, and another chance for Charlie Arehart to reprise his classic “hidden gems” approach to finding what all is new that you might miss, like he’s been doing since CF4.0.1. Some may be modest features that few would use, while others may be pretty big deals but which just don’t get much press. There are always FAR more new things with each release than most people realize–usually several dozen (and CF2023 should be no exception), and then more may come in updates to follow. Charlie will identify them, highlighting some, as well as discussing edition differences, pricing, migration issues, and pointing to resources for learning more.
Speakers
Charlie Arehart
Hosting Multi-context Lucee with CommandBox and ModCFML
Hosting Multi-context Lucee with CommandBox and ModCFML
Talk
Hosting multiple Lucee websites on a single computer can be complex and frustrating. Using CommandBox and ModCFML, this talk will help smooth out those complexities and relieve you of those frustrations.
By marrying the power of CommandBox to drive a website in production with the services of ModCFML to marshal multiple web contexts into a single Lucee instance, you can realise the benefits of improved use of computing resources and simpler management.
If you need to reduce the overhead of hosting many websites, locally or in production on one computer, then come to my talk and learn how it can be done!
Speakers
Richard Herbert
1pm – 1.45pm
Masa CMS in a modern ecosystem
Masa CMS in a modern ecosystem
Talk
Pity the developer whose stack dictates their solutions. Masa CMS has an assortment of tools and methodologies for integrating into the modern ecosystem. From headless renders to JS SPA’s, Masa’s flexibility will free your solution from the underlying stack
Pity the developer whose stack dictates their solutions. Ours is not a world of limited toolsets and hardcoded renders. Modern applications pluck among a vast landscape of API’s, breath their pixels through static pre-renders, dynamic JS frameworks and headless consumer endpoints, distribute their backend logic among Lambda’s, Node endpoints and traditional compiled languages, often all at once. Masa CMS has an assortment of tools and methodologies for integrating into these ecosystems, both internally to generate and enhance content, and outward to the rendered frontend. Learn how to flex your multidisciplinary development chops with style and ease, advantaging Masa’s flexibility to free your solution from the underlying stack.
Speakers
Grant Shepert
How to hack on the Lucee Server code base
How to hack on the Lucee Server code base
Talk
You love Lucee and know a bit of Java and would like to get involved with making Lucee even better?
In this 90-ish-minutes workshop, we’ll walk you through how Lucee works under the hood:
- Lucee Architecture overview
- Loader vs Core
- OSGI
- Building Lucee
- Step Debugging Lucee Server using JDWP
- Creating Extensions
- Creating Lucee Test cases
Speakers
Zac Spitzer
2pm – 2.45pm
Technical Documentation - How Can I Write Them Better and Why Should I Care?
Technical Documentation - How Can I Write Them Better and Why Should I Care?
Talk
Data collection done by people is a wasteful act, and could result in a duplicated work. Gathering info for tasks, for code readability or for infrastructure maintenance - Documentation plays a crucial part in that. How can we write technical docs in an easy way & why should we? find out here!
Data collection done by people is a wasteful act and could result in duplicated work by different people. Gathering info for tasks, or for the ability to maintain code or infrastructure - Documentation plays a crucial part in that.
In this talk, I’ll show you a structured way to write a technical doc, without being a technical writer - So everyone could do it to their best ability. I’ll explain why you should care about these docs, and how eventually it serves your best interests (Yes, more than 1). If you want to save your time and other people’s time - Writing documentation well could have a great impact on that.
Speakers
Hila Fish
3.10pm – 3.55pm
Configuring CFML Docker containers through environment variables
Configuring CFML Docker containers through environment variables
Talk
Containers have become the cornerstone of modern development, but hardcoded configurations can complicate deployment and limit their usefulness. There’s no need to lock yourself in to local-only development, clutter your deployment pipeline with multiple configurations, or worst of all … expose secret keys and passwords in your git repos!
Let’s discover together how we can create flexible configurations, distribute our projects reliably and securely among a myriad of environments and throughout our application’s lifecycle. We’ll take a look at the different environment variables used in Docker images for Adobe Coldfusion, Lucee and Commandbox, as well as creating our own!
Speakers
Guust Nieuwenhuis
ETL in Lucee, does it make sense and how to tune it?
ETL in Lucee, does it make sense and how to tune it?
Talk
Currently, the presenter is using custom created ETL to load data from different sources into the database.
This process has gone through several iterations and in this talk we will look at the ones which have had the biggest impact on the performance of the task.
Speakers
Gert Franz
Mark Drew
4.10pm – 4.55pm
Web Components in Your CFML Application
Web Components in Your CFML Application
Talk
Web Components provide a modular way to build a consistent design system and user experience across your entire application. Instead of copy/pasting the same chunks of coded into various places, you can have a JavaScript/HTML expert focus on getting the UX correct, without them needing to worry about what’s happening in the CFML layer at all.
Web Components offer reusable functionality on the front-end, with native JavaScript. They are a great middle-ground between standard request/response based CFML applications, and apps that aren’t quite ready to move to a full-on JavaScript SPA framework. Web Components themselves are 100% native JavaScript - no new libraries required! Let’s learn how Web Components work, then look at integrating them into a CFML application – I promise it’s easier than you think!
Target Audience: Developers looking to learn more about writing reusable JavaScript and UI components that are platform independent. This talk will spend a little time going over connecting the front-end code to a CFML application, but attendees should already be well versed in CFML and understand how to build a JSON API endpoint.
Speakers
Nolan Erck
Unleash the Power of FusionReactor and OpsPilot AI: Accelerate Troubleshooting and Optimize ColdFusion Performance
Unleash the Power of FusionReactor and OpsPilot AI: Accelerate Troubleshooting and Optimize ColdFusion Performance
Talk
FusionReactor provides critical low-level insight to rapidly pinpoint performance and stability problems, while OpsPilot AI utilizes generative AI to offer instant solutions for troubleshooting, performance tuning and even explaining what your code does! Don't miss this opportunity to witness live demonstrations of FusionReactor and OpsPilot AI in action and unlock the true potential of your ColdFusion applications.Speakers
David Tattersall
Conference Speakers
Charlie Arehart
Dan Card
Mark Drew
Nolan Erck
Hila Fish
Gert Franz
Pete Freitag
Kevin Goldsmith
Richard Herbert
Michael Hnat
Michael Horne
Kai Koenig
Maximilian Kwapil
Luis Majano
Guust Nieuwenhuis
Eric Peterson
Jafar Shayan
Grant Shepert
Alex Skinner
Zac Spitzer
David Tattersall
Dom Watson
Brad Wood
